Shaheen Fazim

Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and compute capabilities to web applications.

A use-after-free issue in the FedCM feature of Google Chrome could allow a remote attacker to execute arbitrary code within a sandbox through a specially crafted HTML page.

A high-severity use-after-free vulnerability exists in the CSS component of the Blink renderer, specifically within the `CSSFontFeatureValuesMap` structure. The issue is caused by incorrect iterator invalidation when processing the `@font-feature-values` property, leading to memory corruption in the browser's render process. A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page containing malicious CSS, which allows for arbitrary code execution inside the browser sandbox. This issue has been confirmed as exploited in the wild.

A flaw exists in the PictureInPicture functionality of Google Chrome. This issue could allow a remote attacker to perform UI spoofing by convincing a user to interact with a specially crafted HTML page through specific UI gestures. The security severity is rated as Medium.

A use-after-free issue exists in the Extensions component of Google Chrome. This flaw could allow an attacker to convince a user to install a malicious extension, potentially leading to heap corruption through a crafted Chrome Extension.

A flaw exists in the V8 component of Google Chrome that could allow a remote attacker to exploit heap corruption. This is due to an out-of-bounds read and write condition triggered by a specially crafted HTML page. The security severity is rated as High.

The JavaScript engine did not handle closed generators correctly, potentially leading to a `nullptr` dereference when resuming them.

A type confusion issue exists in the V8 JavaScript engine component used in Google Chrome, Microsoft Edge, and Chromium browsers. This issue could allow a remote attacker to potentially exploit heap corruption by crafting a malicious HTML page. Exploitation of this issue may lead to denial of service or, potentially, arbitrary code execution. The vulnerability is related to errors in data type conversion within the V8 engine.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 138.0.7204.49 Description: The issue is related to insufficient policy enforcement in the Loader component, allowing a remote attacker to bypass content security policy via a crafted HTML page. This could potentially affect a significant number of devices worldwide, given the popularity of Google Chrome. Recommendations: For versions prior to 138.0.7204.49, update to version 138.0.7204.49 or later to resolve the issue.

An integer overflow in V8, the JavaScript engine used in Google Chrome, could allow a remote attacker to exploit heap corruption via a crafted HTML page. The Chromium security severity is rated as High.

An integer overflow occurred in the `OrderedHashTable` used by the JavaScript engine.

A select option could partially obscure the confirmation prompt shown before launching external apps, potentially tricking a user into launching an external app unexpectedly. This issue only affects Android versions of Firefox.

The issue is related to an integer overflow. It was reported by Shaheen Fazim.

The issue is related to incorrect restriction of visualized user interface layers in Mozilla Firefox and Thunderbird on Android operating systems. This could allow a remote attacker to perform a tapjacking attack, potentially leading to users unknowingly approving the launch of external applications and exposing them to underlying vulnerabilities. Malicious websites may have exploited this to perform user intent confirmation through tapjacking.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Firefox ESR versions prior to 128.5 Thunderbird versions prior to 133 Thunderbird versions prior to 128.5 Description: The issue is related to incorrect restriction of visualized user interface layers, which could allow a remote attacker to conduct spoofing attacks. This could lead to user confusion and possible spoofing attacks by causing a select dropdown to be shown over another tab. Recommendations: For Firefox versions prior to 133, update to version 133 or later to resolve the issue. For Firefox ESR versions prior to 128.5, update to version 128.5 or later to resolve the issue. For Thunderbird versions prior to 133, update to version 133 or later to resolve the issue. For Thunderbird versions prior to 128.5, update to version 128.5 or later to resolve the issue.

The issue is related to a lack of confirmation of the source origin in the protocol handler prompt, which could be obscured using a data: URL within an `iframe`. This could potentially allow a remote attacker to gain unauthorized access to protected information.

An inappropriate implementation in permissions within Google Chrome allows a remote attacker to perform UI spoofing through a specially crafted HTML page. The security severity is rated as low.

The issue is related to a missing delay in the directory upload UI, which could allow an attacker to trick a user into granting permission via clickjacking. This could enable a remote attacker to conduct a clickjacking attack.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw exists in Blink, a component of Google Chrome, that could allow a remote attacker to perform UI spoofing through a specially crafted HTML page. This issue is related to an incorrect security UI. Recommendations Update Google Chrome to version 147.0.7727.55 or later.

The issue is related to an inappropriate implementation in the Permissions feature of Google Chrome and Microsoft Edge, allowing a remote attacker to perform UI spoofing via a crafted HTML page. This can be achieved by convincing a user to engage in specific UI gestures. The estimated number of potentially affected devices is not specified.